$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: 6BtnknNf2NAP8cyebX0i+y8I3sFn8x2ccBPiVXwNrnU= Subject key identifier: 8C:95:F1:55:C2:59:41:1A:B4:DE:FF:3A:16:09:0D:D8:78:D9:14:69 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 3484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 347B Signing time: Thu 24 Apr 2025 14:33:44 +0000 Manifest this update: Thu 24 Apr 2025 14:33:43 +0000 Manifest next update: Thu 01 May 2025 14:33:43 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: 5r5xuU85b8mgrPZxfHxoyCca7eM5o7MyjDNcSSsdw1w=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: LYYe0/ugE0YWppDV9+N/oSDl4IKiJUQFEaZM88DJJ/s=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: JwlADxU15y3Ux/pBiI3TitQwzPcxeHG3v1ZhXPEpRug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13444 (0x3484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Apr 24 14:33:43 2025 GMT Not After : May 1 14:33:43 2025 GMT Subject: CN=680a4bc8-a625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2b:7c:31:79:75:69:ca:fa:26:1a:7a:d6:08: eb:49:33:d1:f9:23:fc:e6:29:0d:80:c0:ea:70:4e: c9:1c:4f:92:35:0e:37:fc:49:fe:ef:7c:30:8c:6a: 1e:57:ac:20:1d:10:fa:55:da:3b:9e:c0:b5:ca:e2: cf:9a:20:66:85:fb:fd:3a:27:71:83:0c:a1:05:9c: e2:64:23:1c:30:48:35:c3:c2:2a:fc:b6:79:46:09: f7:c6:57:5e:fc:cc:54:fa:02:2b:7d:cf:58:e1:a3: d3:f0:fe:dd:05:92:97:08:66:39:60:b5:19:9c:a4: b6:4e:70:c5:20:c3:65:aa:3f:6f:76:78:6a:3e:c0: 16:28:5b:69:2b:db:0f:98:41:5a:45:2a:9e:f1:80: 70:9c:38:c4:1e:62:5c:3f:3b:3d:ef:5b:60:6d:0d: 93:f3:63:b0:24:ff:f1:f7:26:09:fb:d2:35:8f:96: 6a:f5:be:e3:e8:35:d6:a4:ce:9f:3c:db:ed:a5:e3: 18:36:2a:dd:00:60:b3:51:f2:40:ef:2d:8d:c5:7a: 14:d0:39:de:3b:9c:72:47:0c:c2:15:90:e6:c8:e2: 42:f1:fd:0c:4e:83:01:be:2b:c0:bf:1c:90:94:9d: 8f:eb:fa:17:b9:94:6e:9f:81:36:d8:8f:ce:6a:2b: bc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:95:F1:55:C2:59:41:1A:B4:DE:FF:3A:16:09:0D:D8:78:D9:14:69 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:79:4e:6f:d6:0d:74:c3:0d:c9:ee:3c:3c:ff:4c:ec:ea:f1: 65:7f:c1:c1:b6:06:4a:94:24:3e:ce:3b:d4:69:67:3d:21:b3: fd:43:8e:99:2d:8a:4b:55:f2:65:74:77:24:ed:3b:fc:e0:75: 15:d9:da:af:e7:2c:ab:41:c2:92:a6:42:6e:bb:36:e7:ba:ea: 9c:e8:3f:cf:f4:db:cd:0a:c7:2d:50:0b:fe:e5:b7:ed:28:00: a4:a6:1c:9b:1f:4d:98:d8:7c:b6:dd:4f:d0:e0:bd:50:4c:4d: f3:b8:0e:ea:03:9c:c2:9e:46:ec:29:3a:67:20:cb:dd:38:21: 21:5f:40:0f:5a:22:65:fd:0d:61:b2:39:2d:f9:be:b4:45:55: 03:13:bd:50:8a:09:ee:95:b4:78:3f:f2:24:56:69:73:10:2f: f2:1b:98:7d:8e:98:0a:92:ae:46:59:92:5f:b3:45:5a:fd:29: e1:1f:d5:45:15:03:d4:20:b4:ea:f4:b9:16:73:b5:01:05:ab: 78:47:94:1c:dc:ec:c6:a9:d0:e6:87:3d:0e:40:76:2c:f1:64: 94:07:ea:79:f0:e6:b0:69:d6:51:62:15:4c:4c:e8:d9:66:e7: 18:37:a9:eb:ab:3e:74:a6:ff:92:14:ad:a8:20:d6:b4:3c:e9: 05:4b:8c:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjUwNDI0MTQzMzQzWhcNMjUwNTAxMTQzMzQzWjAYMRYwFAYD VQQDEw02ODBhNGJjOC1hNjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5it8MXl1acr6Jhp61gjrSTPR+SP85ikNgMDqcE7JHE+SNQ43/En+73wwjGoe V6wgHRD6Vdo7nsC1yuLPmiBmhfv9OidxgwyhBZziZCMcMEg1w8Iq/LZ5Rgn3xlde /MxU+gIrfc9Y4aPT8P7dBZKXCGY5YLUZnKS2TnDFIMNlqj9vdnhqPsAWKFtpK9sP mEFaRSqe8YBwnDjEHmJcPzs971tgbQ2T82OwJP/x9yYJ+9I1j5Zq9b7j6DXWpM6f PNvtpeMYNirdAGCzUfJA7y2NxXoU0DneO5xyRwzCFZDmyOJC8f0MToMBvivAvxyQ lJ2P6/oXuZRun4E22I/Oaiu8mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyV8VXC WUEatN7/OhYJDdh42RRpMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAneU5v1g10ww3J7jw8/0zs6vFlf8HBtgZKlCQ+zjvUaWc9IbP9Q46Z LYpLVfJldHck7Tv84HUV2dqv5yyrQcKSpkJuuzbnuuqc6D/P9NvNCsctUAv+5bft KACkphybH02Y2Hy23U/Q4L1QTE3zuA7qA5zCnkbsKTpnIMvdOCEhX0APWiJl/Q1h sjkt+b60RVUDE71QignulbR4P/IkVmlzEC/yG5h9jpgKkq5GWZJfs0Va/SnhH9VF FQPUILTq9LkWc7UBBat4R5Qc3OzGqdDmhz0OQHYs8WSUB+p58OawadZRYhVMTOjZ ZucYN6nrqz50pv+SFK2oINa0POkFS4y3 -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:47 2025 by rpki-client